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VIA E-MAIL fBREACH.SECURITY@AG.NY.GOV) AND FEDERAL EXPRESS 


New York State Attorney General’s Office 
SECURITY BREACH NOTIFICATION 
Consumer Frauds & Protective Bureau 
120 Broadway, 3rd Floor 
New York, NY 10271 


VIA E-MAIL fRISK@NYSIC.NY.GOV) AND FEDERAL EXPRESS 

New York State Division of State Police 
SECURITY BREACH NOTIFICATION 
New York State Intelligence Center 
31 Tech Valley Drive, Second Floor 
East Greenbush, NY 12061 


VIA E-MAIL (SECURITY BREACH NOTIFICATION@DOS.NY.GOV) AND 

FEDERAL EXPRESS 


New York State Department of State Division of Consumer Protection 
Attn: Director of the Division of Consumer Protection 
SECURITY BREACH NOTIFICATION 
99 W. Washington Ave., Suite 650 
Albany, NY 12231 

Re: Notification of a Data Security Incident Involving Personal Information 

Dear Madam/Sir: 

We represent Rammelkamp Bradney, P.C. (“Rammelkamp Bradney”). Rammelkamp Bradney is 
reporting a potential unauthorized disclosure of unencrypted computerized data containing the personal 
information of the one (1) New York resident pursuant to N.Y. Gen. Bus. Law § 899-aa. 

The investigation of this incident is ongoing, and this notice will be supplemented, if necessary, with any 
significant new facts discovered subsequent to its submission. Rammelkamp Bradney is advising you 
of this incident and submitting the attached New York State Security Breach Reporting Form pursuant 
to N.Y. Gen. Bus. Law § 899-aa(8) based on the information available to date. By providing this notice, 
Rammelkamp Bradney does not waive any potential rights or defenses regarding the applicability of 
New York law or personal jurisdiction in connection with this incident. 
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Vedder Price P.C, is affiliated with Vedder Price LLP, which operates in England and Wales, Vedder Price (CA), LLP, which operates in California, and Vedder Price Pte. Lid., which operates in Singapore. 
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Background of the Incident 


Rammelkamp Bradney (http://rammelkamp.com/), located in Jacksonville, Illinois, is a full service law 
firm providing clients with effective legal solutions to challenging problems in Central Illinois. 

On or about March 30, 2017, Rammelkamp Bradney received a report from its Information Technology 
(“IT’) firm that an external actor may have gained access to certain files maintained on the firm’s 
network that contained a limited number of client’s names, addresses and Social Security numbers. 
Upon discovering the incident, Rammelkamp Bradney promptly launched an internal investigation and 
notified the Federal Bureau of Investigation (“FBI”) and the Internal Revenue Service (“IRS”). 
Rammelkamp Bradney is cooperating in the FBI’s and IRS’s investigations into this incident. 


Notice to the New York Resident 


On April 26, 2017, Rammelkamp Bradney notified the one (1) affected New York resident of the 
incident. Attached is a sample of the notification letter that is being sent to the affected New York 
resident via first-class United States mail. 

Rammelkamp Bradney has also arranged to offer one (1) year of complimentary credit monitoring and 
identity theft protection services through Experian to the affected New York resident. 

In addition, the affected New York resident can contact Rammelkamp Bradney at 217-245-6177 
between regular business hours, Monday through Friday, to ask questions and to receive further 
information regarding the incident. 


Other Steps Undertaken and to Be Undertaken by Rammelkamp Bradney 


Rammelkamp Bradney has already begun taking several actions to help prevent this type of incident 
from occurring in the future. These actions include evaluating ways to best strengthen Rammelkamp 
Bradney’s systems to guard against similar attacks in the future and providing its employees with 
additional information on best practice for cyber security. 


Contact Information 


Please contact me if you have any questions or if I can provide you with any further information 
concerning this matter. Thank you. 

Yours vprv trulv 



Bruce A. Radke 


BAR/bah 

Enclosure 

cc: H. Allen Yow, Managing Partner, Rammelkamp Bradney, P.C. (via e-mail). 


CHICAGO/#2981383 






FoHKt-vr C- Ke-. ,vrc>\' 



Rammelkamp Bradney 

* Attorneys at Law * 
Established 1895 


April 26, 2017 



We are writing to advise you about a recent incident related to our computer 
network. You are receiving this letter because your personal information was 
stored on our network when there may have been unauthorized access to that 
information. This letter includes guidance regarding what you can do to prevent 
any unauthorized use of your personal information. Rammelkamp Bradney, 
P C. (‘‘Rammelkamp Bradney' 1 ) values and respects your privacy, and we are 
available to assist, if necessary. 

On or about March 30, 2017. Rammelkamp Bradney received a report from its 
Information Technology (“IT") firm that an external actor may have gained 
access to Rammelkamp Bradney’s network The files that may have been 
accessed on our network included those that contained your personal 
information, including your name, address, and Social Security number. 

You may wish to implement credit monitoring or a credit freeze to prevent 
unauthorized use of your personal information If you decide to implement 
credit monitoring, we have arranged for one year of free credit monitoring and 
identity protection services through Experian’s® ProtectMylD^ : Alert, which will 
promptly alert you to potential issues and help you resolve them This is being 
offered at no cost to you. Please see the additional information that is enclosed 
for instructions on how to activate your complimentary one-year ProtectMylD 
Alert membership using the Activation Code listed below. 

Rammelkamp Bradney values the confidence placed in our firm by our clients. 
We have retained outside IT specialists to investigate this incident and take 
steps to Strengthen and enhance our network security. We have also notified 
the Federal Bureau of Investigation and the Criminal Investigation Division of 
the Internal Revenue Service, and we are continuing to cooperate in their 
respective investigations into this incident, 
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We apologize for any inconvenience or concern related to this incident. If you have 
questions, or would like assistance from our office, feel free to contact us. 

Sincerely, 

RAMMELKAMP BRADNEY, P.C. 


By: J _ L/jJLcC 

BradieyWViison 


Enclosure 



Activating Your Complimentary Credit Monitoring 


To help protect your identity, we are offering a complimentary one-year membership of 
Experian's e ProtectMylD® Alert. This product helps detect possible misuse of your personal 
information and provides you with superior identity protection support focused on immediate 
identification and resolution of identity theft. 

Activate ProtectMylD Now in Three Easy Steps 


1. ENSURE that you enroll by August 3, 2017. (Your code will not work after this date.) 

2. VISIT the ProtectMylD Website t o enroll: www.protectmyid.com/redeem . 

3. PROVIDE your Activation Code: 

If you have questions o r need an alternative to enrolling online, please call 1-877-288-8057 and 
provide engagement # 


ADDITIONAL DETAILS REGARDING YOUR ONE-YEAR PROTECTMYID* MEMBERSHIP: 


A credit card is not required for enrollment 

Once your ProtectMylD membership is activated, you will receive the following features: 

3 Free Copy of your Experian Credit Report 

3 Surveillance Alerts for the following: 

o Daily Bureau Credit Monitoring: Alerts of key changes and suspicious activity 
found on your Experian, Equifax"' and TransUnion® credit reports. 

* Identity Theft Resolution and ProtectMylD ExtendCARE™: Toll-free access to U.S.- 
based customer care and a dedicated Identity Theft Resolution Agent who will walk you 
through the process of fraud resolution from start to finish for seamless service. The 
agent will investigate each incident: help you contact credit grantors to dispute charges 
and close accounts, including credit, debit and medical insurance cards: assist with 
freezing credit files; and contact government agencies 

o It is recognized that identity theft can happen months and even years after a data 
breach. To offer added protection, you will receive ExtendCARE"" 11 . which 
provides you with the same high level of Fraud Resolution support even after 
your ProtectMylD membership has expired. 

a $1 MMiion Identity Theft insurance*: Immediately covers certain costs, including lost 
wages, private investigator fees and unauthorized electronic fund transfers. 

Activate your membership today at www.protectmyid.com/redeem 
or call 1-877-288-8057 to register with the activation code above. 

Once your enrollment in ProtectMylD is complete, you should carefully review your credit report 
for inaccurate or suspicious items. If you have any questions about ProtectMylD. need help 
understanding something on your credit report or suspect that an item on your credit report may 
be fraudulent, please contact Experian s customer care team at 1-877-288-8057 

’Identity theft insurance is underwritten by insurance company subsidiaries or affiliates of AIG. 
The description herein is a summary and is intended for informational purposes only, and does 
not include all terms, conditions and exclusions of the policies described. Please refer to the 





actual policies for terms, conditions and exclusions of coverage. Coverage may not be 
available in all jurisdictions. 

Additional Important Information 

In the aftermath of similar incidents, some opportunistic criminals seek to fraudulently obtain 
personal information of affected individuals by claiming to be the business experiencing the 
breach. Please be extremely cautious when giving out personal information and do not disclose 
your Social Security number via e-mail (including to us). Do not respond to any e-mail requests 
from entities requesting your Social Security number, date of birth, financial account numbers, 
login/password information or other sensitive personal information. We will not ask you for your 
Social Security number, date of birth, financial account number or other sensitive personal 
information with regard to this incident. If you receive any written request or electronic request 
via e-mail purporting to be from Rammelkamp Bradney, and it looks suspicious, please notify 
us immediately. The IRS does not initiate contact with taxpayers by e-mail, fax or any social 
media tools to request personal financial information, if you receive an e-mail or similar request 
that appears to be from the IRS, the IRS suggests that you do not respond to any such 
requests. If you become aware that a false tax return has been filed with your name and Social 
Security number, in addition to taking the appropriate steps outlined by the IRS on their website, 
please notify us immediately. 

As a precautionary measure, we recommend that you remain vigilant to protect against potential 
fraud and/or identity theft by, among other things, reviewing your account statements and credit 
reports closely. If you detect any suspicious activity on an account, you should promptly notify 
the financial institution or company with which the account is maintained. You should also 
promptly report any fraudulent activity or any suspected incidents of identity theft to proper law 
enforcement authorities, including the police and your state's attorney general, as well as the 
Federal Trade Commission ("FTC"). 

You may wish to review the tips provided by the FTC on fraud alerts, security/credit freezes and 
steps you can take to avoid identity theft. For more information and to contact the FTC, please 
visit www.ftc.gov/idth eft or call 1-877-ID-THEFT (1-877-438-4338). You may also contact the 
FTC at Federal Trade Commission, 600 Pennsylvania Avenue, NW. Washington. DC 20580. 

You can also complete and submit IRS Form 14039, Identity Theft Affidavit which can be found 
at irs.gov/pub/irs-pdf/f14039.pdf. You can mail or fax the completed form to the IRS instructions 
included on the form. Additionally, the IRS offers further guidance for protecting your identity at 
the following website: https;//www.irs.gov/individuals,- 1 'Identity-protection . There are a number of 
tools listed there that may be helpful you. 

Credit Reports : You may obtain a free copy of your credit report once every 12 months from 
each of the three national credit reporting agencies by visiting 
http://www.annualcreditreport.com , by calling toll-free 1-877-322-8228. or by completing an 
Annual Credit Report Request Form and mailing it to Annual Credit Report Request Sen/ice, 
P.O. Box 105281, Atlanta, GA 30348. You can print a copy of the request form at: 
https://www.annuaicreditreport.com/cra/req uestformtinal.pd f. 

Alternatively, you may elect to purchase a copy of your credit report by contacting one of the 
three national credit reporting agencies. Contact information for the three national credit 
reporting agencies for the purpose of requesting a copy of your credit report or for general 
inquiries, including obtaining information about fraud alerts and placing a security freeze on your 
credit files, is as follows: 










1-800-34S-9960 
www equifax corn 
P.O." Box" 105788 
Atlanta. GA 30348 


Equifax 


P.O Box 9554 
Alien TX 75013 


Experian 

1-888-397-3742 

w ww. exp e rt an com 


TransUnion 
1-888-909-8872 
ww w.Pans unton .com 
P.O" Box 2066" 
Chester. PA 19022 


Fraud Alerts : You may want to consider placing a fraud alert on your credit report. An initial 
fraud alert is free and will stay on your credit file for at least 90 days. The alert informs creditors 
of possible fraudulent activity within your report and requests that creditors contact you prior to 
establishing any new accounts in your name. To place a fraud alert on your credit report, 
contact any of the three national credit reporting agencies using the contact information listed 
above. Additional information is available at http /'/www an nua 8c r edit fep ort.com 

Credit and Security Freezes : You may have the right to put a credit freeze also known as a 
security freeze on your credit file so that no new credit can be opened in your name without the 
use of a PIN number that is issued to you when you initiate a freeze. A credit freeze is designed 
to prevent potential credit grantors from accessing your credit report without your consent. If 
you place a credit freeze on your credit file, potential creditors and other third parties will not be 
able to get access to your credit report unless you temporarily lift the freeze. Therefore, using a 
credit freeze may cause a delay should you attempt to obtain credit. In addition, you may incur 
fees for placing, lifting and/or removing a credit freeze. Credit freeze laws vary from state to 
state. The cost of placing, temporarily lifting and removing a credit freeze also varies by state, 
generally S5 to $20 per action at each credit reporting company. Unlike a fraud alert, you must 
separately place a credit freeze on your credit file at each credit reporting company. Since the 
instructions for how to establish a credit freeze differ from state to state, please contact the 
three major credit reporting companies as specified below to find out more information 

Equifax Security Freeze Experian Security Freeze TransUnion Security Freeze 

P.O Box 105788 P O. Box 9554 Fraud Victim Assistance 

Atlanta, GA 30348 Allen. TX 75013 Department 


P.O. Box 6790 
Fullerton, CA 92834 


You can obtain more information about fraud alerts and credit freezes by contacting the FTC or 
one of the national credit reporting agencies listed above. If you put a credit freeze on your 
credit file please contact us for reimbursement of the fees you incur in placing the credit freeze. 







NEW YORK STATE SECURITY BREACH REPORTING FORM 
Pursuant to the Information Security Breach and Notification Act 
(General Business Law §899-aa) 


Name and address of Entity that owns or licenses the computerized data that was subject to the breach ; 

Rammelkamp Bradney, ILC. 

Street Address: 232 West State Street 

City: Jacksonville State: IL Zip Code: 62650 


Submitted by : Mr, Bruce Radke ______ Title: Shareholder.__ Dated: April 27, 2017 

Firm Name (if other than entity): Vedder Price RC 

Telephone: (312) 609-7689 _ _ _ Email: bradke@vcddeiprice.com_ 

Relationship to Entity whose information was compromised: Attorney 


Ty pe of Organization (please select one): [ ] Governmental Entity in New York State; | ] Other Governmental Entity; 
| 1 Educational; f [Health Care; { ]Financial Services; [x {Other Commercial; or [ ]Not-for-profit. 


Number of Persons Affected : 

Total (Including NYS residents): 418 NYS Residents: 1 

If the number of NYS residents exceeds 5,000, have the consumer reporting agencies been notified? [ J Yes [ ] No 


Dates : Breach Occurred: January 2, 2017 - February 13, 2017 Breach Discovered: March 30, 2017 Consumer 
Notification: April 26, 2017 


Description of Breach (please select all that apply): 

[ (Loss or theft of device or media (e*g,, computer, laptop, external hard drive, thumb drive, CD, tape); 
[ (Internal system breach; ( j Insider wrongdoing; [x 1 External system breach (e.g., hacking); 
j ]Inadvertent disclosure ; [ [Other specify: 


Information Acquired : Name or other personal identifier in combination with (please select ajj that apply): 

[ X [Social Security Number 

f [Driver's license number or non-driver identification card number 

[ J Financial account number or credit or debit card number, in combination with the security code, access code, 
password, or PIN for the account 


Manner of Notification to Affected Persons - ATTACH A COPY OF THE TEMPLATE OF THE NOTICE TO 
AFFECTED NYS RESIDENTS: 

[X] Written [ ] Electronic [ ] Telephone [ ] Substitute notice 

List dates of any previous (within 12 months) breach notifications: None 


Identify Theft Protection Service Offered : [ X [Yes [ ] No 
Duration: One Year Provider: Experian 

Brief Description of Service: One (1) year of complimentary Experian ProtectMylD Alert credit monitoring and identity 
theft_protection services 










































































